Skip to content

Product

stripe github.com/stripe/stripe-cli vulnerabilities

2 published CVES affecting stripe github.com/stripe/stripe-cli, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest stripe github.com/stripe/stripe-cli CVEs

Newest publication first

  1. CVE-2024-45401 stripe-cli Path Traversal vulnerability

    Published
    HighCVSS 7.1 EPSS 0.21%

    stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --ar...

  2. CVE-2022-24753 Code injection in Stripe CLI on windows

    Published
    HighCVSS 7.0 EPSS 0.37%

    Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe ope...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.